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AMENDMENTS TO THE CLAIMS 

Claims 1-28 (canceled). 

29. (Previously Presented) A method for assisting a user in verifying a cast ballot B cast stored 
in a server, the method comprising: 

forming a digital signature of B cast using a private key of the server DS(B cast , s); 
associating the B cast and DS(B cast , s) with a vote serial number VSN; 
forming a confirmation token, comprising DS(B cast , s) and VSN; 
making the confirmationtoken available to a user; 
receiving a confirmation token made available to a user; 

extracting VSN reC eived token and DS reC eivedtoken(B cas t, s) from the received token; and 
for VSN equal to VSN reC eived token, comparing DS re ceivedtoken(B cast , s) and at least one of 

DS(B cast , s) and DS(B cast , S); 
if the comparison shows equivalence between the data compared, determining that B cast is 

verified. 

30. (Currently Amended) The method of Claim 29 wherein: 

the confirmation token further comprises a digital signature of an aggregation comprising 

the associated B cast and VSN using the server's private key DS (Aggregation, s) T .; 
extracting DS reC eived token (Aggregation, s) from the received token; and 
B cast is verified only upon the additional condition that DS reC eived token (Aggregation, s) is 
equivalent to DS (Aggregation, s). 
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3 1 . (Currently Amended) A method for assisting a user in verifying a cast ballot recorded in 
a server, the method comprising: 

receiving in a server at least one set of: 
a cast ballot B cast and 

a digital signature of B cast formed with the private key of a voter casting the ballot 
DS(B cast , v); 

forming: 

a digital signature of B cast using a private key of the server DS(B cast , s), 
associating B cast , DS(B cast , v), and DS(B cast , s) with a vote serial number VSN; 
forming a confirmation token, comprising: 

DS(B cast , s), DS(B cast , v), VSN, and DS (Aggregation, s), 

where DS(Aggregation, s) is the digital signature of the aggregation of the 
associated B cast , DS(B cast , v), DS(B cast , s), and VSN; 
making the confirmation token available to a user; 
receiving a confirmation token: 

extracting VSN reC eived token and at least One Of DS re ceivedtoken(B cast , S), DS re ceivedtoken(B cast , v), 

and DS reC eivedtoken(AG, s) from the received token; and 
for VSN re ceived token and the corresponding VSN, comparing at least one of: 
DS re ceivedtoken(B cast , s) and DS(B cast , S); 

DS re ceivedtoken(B cast , v), and DS(B cast , v)j 

DS reC eivedtoken(Aggregation, s), and DS(Aggregation, s); 
if comparison shows equivalence between the data compared, determining that B cast is 
verified. 
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32. (Previously Presented) The method of Claim 3 1 further comprising: 

if comparison shows equivalence between DS reC eivedtoken( Aggregation, s), and 

DS(Aggregation, s), determining that the received confirmation token has not 
been modified since its formation. 


33. (Currently Amended) A method for assisting a user verifying a cast ballot recorded in a 
server, the method comprising: 

receiving a cast ballot ("Beast ") in a server; 

forming a digital signature of Beast using a private key of the server ("DS(Bcast , s)") ; :, 
associating Beast and DS(Bcast , s) with a vote serial number ("VSM"); ]uu\ 
for VSN, comparing DS(Bcast , s) and DS(Bcast , S)-.; 

if comparison shows equivalence between the data compared, determining that Beast is 
verified. 
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